CVE-2024-6237
Fixed in a distro release EPSS <1%CVSS 6.5
A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
Products: Red Hat Directory Server 12.4 for RHEL 9, Red Hat Enterprise Linux 9, Red Hat Directory Server 11, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | 389-ds-base | 2.4.5-9.el9_4 |
| AlmaLinux 9 | 389-ds-base-devel | 2.4.5-9.el9_4 |
| AlmaLinux 9 | 389-ds-base-libs | 2.4.5-9.el9_4 |
| AlmaLinux 9 | python3-lib389 | 2.4.5-9.el9_4 |
| Debian 12 | 389-ds-base | no fix |
| Debian 13 | 389-ds-base | 2.4.5+dfsg1-1 |
| Red Hat directory server 12.4 | 389-ds-base | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-debuginfo | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-debugsource | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-devel | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-libs | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-libs-debuginfo | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-snmp | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | 389-ds-base-snmp-debuginfo | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | cockpit-389-ds | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat directory server 12.4 | python3-lib389 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat Enterprise Linux 9 | 389-ds-base | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-debuginfo | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-debugsource | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-devel | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-libs | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-libs-debuginfo | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | 389-ds-base-snmp-debuginfo | 0:2.4.5-9.el9_4 |
| Red Hat Enterprise Linux 9 | python3-lib389 | 0:2.4.5-9.el9_4 |
| Rocky Linux 9 | 389-ds-base | 0:2.4.5-9.el9_4 |
| Ubuntu 22.04 LTS | 389-ds-base | no fix |
| Ubuntu 26.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 16.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 18.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 20.04 LTS | 389-ds-base | no fix |
| openSUSE Tumbleweed | 389-ds | 3.1.1~git0.aef1668-1.1 |